Vulnerability · Published Feb 9, 2025 · Assigned by Linux

CVE-2025-21684gpio: xilinx: Convert gpio_lock to raw spinlock

Medium 5.5

In plain English

A medium-severity security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 11% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS NVD)5.5Medium
Exploit odds (30 days)0.2%top 89.3% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: gpio: xilinx: Convert gpio_lock to raw spinlock irq_chip functions may be called in raw spinlock context. Therefore, we must also use a raw spinlock for our own internal locking. This fixes the following lockdep splat: [ 5.349336] ============================= [ 5.353349] [ BUG: Invalid wait context ] [ 5.357361] 6.13.0-rc5+ #69 Tainted: G W [ 5.363031] ----------------------------- [ 5.367045] kworker/u17:1/44 is trying to lock: [ 5.371587] ffffff88018b02c0 (&chip->gpio_lock){....}-{3:3}, at: xgpio_irq_unmask (drivers/gpio/gpio-xilinx.c:433 (discriminator 8)) [ 5.380079] other info that might help us debug this: [ 5.385138] context-{5:5} [ 5.387762] 5 locks held by kworker/u17:1/44: [ 5.392123] #0: ffffff8800014958 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work (kernel/workqueue.c:3204) [ 5.402260] #1: ffffffc082fcbdd8 (deferred_probe_work){+.+.}-{0:0}, at: process_one_work (kernel/workqueue.c:3205) [ 5.411528] #2: ffffff880172c900 (&dev->mutex){....}-{4:4}, at: __device_attach (drivers/base/dd.c:1006) [ 5.419929] #3: ffffff88039c8268 (request_class#2){+.+.}-{4:4}, at: __setup_irq (kernel/irq/internals.h:156 kernel/irq/manage.c:1596) [ 5.428331] #4: ffffff88039c80c8 (lock_class#2){....}-{2:2}, at: __setup_irq (kernel/irq/manage.c:1614) [ 5.436472] stack backtrace: [ 5.439359] CPU: 2 UID: 0 PID: 44 Comm: kworker/u17:1 Tainted: G W 6.13.0-rc5+ #69 [ 5.448690] Tainted: [W]=WARN [ 5.451656] Hardware name: xlnx,zynqmp (DT) [ 5.455845] Workqueue: events_unbound deferred_probe_work_func [ 5.461699] Call trace: [ 5.464147] show_stack+0x18/0x24 C [ 5.467821] dump_stack_lvl (lib/dump_stack.c:123) [ 5.471501] dump_stack (lib/dump_stack.c:130) [ 5.474824] __lock_acquire (kernel/locking/lockdep.c:4828 kernel/locking/lockdep.c:4898 kernel/locking/lockdep.c:5176) [ 5.478758] lock_acquire (arch/arm64/include/asm/percpu.h:40 kernel/locking/lockdep.c:467 kernel/locking/lockdep.c:5851 kernel/locking/lockdep.c:5814) [ 5.482429] _raw_spin_lock_irqsave (include/linux/spinlock_api_smp.h:111 kernel/locking/spinlock.c:162) [ 5.486797] xgpio_irq_unmask (drivers/gpio/gpio-xilinx.c:433 (discriminator 8)) [ 5.490737] irq_enable (kernel/irq/internals.h:236 kernel/irq/chip.c:170 kernel/irq/chip.c:439 kernel/irq/chip.c:432 kernel/irq/chip.c:345) [ 5.494060] __irq_startup (kernel/irq/internals.h:241 kernel/irq/chip.c:180 kernel/irq/chip.c:250) [ 5.497645] irq_startup (kernel/irq/chip.c:270) [ 5.501143] __setup_irq (kernel/irq/manage.c:1807) [ 5.504728] request_threaded_irq (kernel/irq/manage.c:2208)

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linux6.1.129-1DEBIAN-CVE-2025-21684
Debian:13linux6.12.11-1DEBIAN-CVE-2025-21684
Debian:14linux6.12.11-1DEBIAN-CVE-2025-21684
Ubuntu:22.04:LTSlinux5.15.0-140.150USN-7510-1
Ubuntu:22.04:LTSlinux5.15.0-140.150UBUNTU-CVE-2025-21684
Ubuntu:24.04:LTSlinux6.8.0-62.65UBUNTU-CVE-2025-21684
Ubuntu:24.04:LTSlinux6.8.0-62.65USN-7595-1
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2025-21684
Ubuntu:22.04:LTSlinux-aws5.15.0-1084.91UBUNTU-CVE-2025-21684
Ubuntu:22.04:LTSlinux-aws5.15.0-1084.91USN-7510-7
Ubuntu:24.04:LTSlinux-aws6.8.0-1030.32USN-7595-1
Ubuntu:24.04:LTSlinux-aws6.8.0-1030.32UBUNTU-CVE-2025-21684
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2025-21684
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2025-21684
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2025-21684
Ubuntu:22.04:LTSlinux-aws-6.86.8.0-1030.32~22.04.1USN-7595-1
Ubuntu:22.04:LTSlinux-aws-6.86.8.0-1030.32~22.04.1UBUNTU-CVE-2025-21684
Ubuntu:22.04:LTSlinux-azure5.15.0-1089.98USN-7510-3
Ubuntu:22.04:LTSlinux-azure5.15.0-1089.98UBUNTU-CVE-2025-21684
Ubuntu:24.04:LTSlinux-azure6.8.0-1030.35USN-7596-1
Ubuntu:24.04:LTSlinux-azure6.8.0-1030.35UBUNTU-CVE-2025-21684
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2025-21684
Ubuntu:24.04:LTSlinux-azure-6.116.11.0-1013.13~24.04.1USN-7448-1
Ubuntu:24.04:LTSlinux-azure-6.116.11.0-1013.13~24.04.1UBUNTU-CVE-2025-21684
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2025-21684
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2025-21684
Ubuntu:22.04:LTSlinux-azure-6.86.8.0-1030.35~22.04.1UBUNTU-CVE-2025-21684
Ubuntu:22.04:LTSlinux-azure-6.86.8.0-1030.35~22.04.1USN-7596-1
Ubuntu:22.04:LTSlinux-azure-fde5.15.0-1089.98.1UBUNTU-CVE-2025-21684
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2025-21684
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2025-21684
Ubuntu:24.04:LTSlinux-azure-nvidia6.8.0-1018.19UBUNTU-CVE-2025-21684
Ubuntu:24.04:LTSlinux-azure-nvidia6.8.0-1018.19USN-7596-2
Ubuntu:22.04:LTSlinux-gcp5.15.0-1083.92UBUNTU-CVE-2025-21684
Ubuntu:22.04:LTSlinux-gcp5.15.0-1083.92USN-7511-1
Ubuntu:24.04:LTSlinux-gcp6.8.0-1031.33USN-7595-5
Ubuntu:24.04:LTSlinux-gcp6.8.0-1031.33UBUNTU-CVE-2025-21684
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2025-21684
Ubuntu:24.04:LTSlinux-gcp-6.116.11.0-1013.13~24.04.1UBUNTU-CVE-2025-21684
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2025-21684
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2025-21684
Ubuntu:22.04:LTSlinux-gcp-6.86.8.0-1031.33~22.04.1UBUNTU-CVE-2025-21684
Ubuntu:22.04:LTSlinux-gcp-6.86.8.0-1031.33~22.04.1USN-7595-5
Ubuntu:22.04:LTSlinux-gke5.15.0-1081.87USN-7511-3
Ubuntu:22.04:LTSlinux-gke5.15.0-1081.87UBUNTU-CVE-2025-21684
Ubuntu:24.04:LTSlinux-gke6.8.0-1026.30USN-7595-1
Ubuntu:24.04:LTSlinux-gke6.8.0-1026.30UBUNTU-CVE-2025-21684
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1066.74UBUNTU-CVE-2025-21684
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1066.74USN-7510-1
Ubuntu:24.04:LTSlinux-gkeop6.8.0-1013.15UBUNTU-CVE-2025-21684
Ubuntu:24.04:LTSlinux-gkeop6.8.0-1013.15USN-7595-1
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2025-21684
Ubuntu:24.04:LTSlinux-hwe-6.116.11.0-24.24~24.04.1USN-7445-1
Ubuntu:24.04:LTSlinux-hwe-6.116.11.0-24.24~24.04.1UBUNTU-CVE-2025-21684
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2025-21684
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2025-21684
Ubuntu:22.04:LTSlinux-hwe-6.86.8.0-64.67~22.04.1UBUNTU-CVE-2025-21684
Ubuntu:22.04:LTSlinux-ibm5.15.0-1076.79USN-7510-1
Ubuntu:22.04:LTSlinux-ibm5.15.0-1076.79UBUNTU-CVE-2025-21684
Ubuntu:24.04:LTSlinux-ibm6.8.0-1027.27USN-7595-1
Ubuntu:24.04:LTSlinux-ibm6.8.0-1027.27UBUNTU-CVE-2025-21684
Ubuntu:22.04:LTSlinux-ibm-6.86.8.0-1027.27~22.04.1UBUNTU-CVE-2025-21684
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2025-21684
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1079.85UBUNTU-CVE-2025-21684
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1079.85USN-7510-1
Ubuntu:22.04:LTSlinux-kvm5.15.0-1080.85USN-7510-1
Ubuntu:22.04:LTSlinux-kvm5.15.0-1080.85UBUNTU-CVE-2025-21684
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-140.150USN-7510-1
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-140.150UBUNTU-CVE-2025-21684
Ubuntu:24.04:LTSlinux-lowlatency6.8.0-62.65.1USN-7595-1
Ubuntu:24.04:LTSlinux-lowlatency6.8.0-62.65.1UBUNTU-CVE-2025-21684
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2025-21684
Ubuntu:24.04:LTSlinux-lowlatency-hwe-6.116.11.0-1012.13~24.04.1USN-7445-1
Ubuntu:24.04:LTSlinux-lowlatency-hwe-6.116.11.0-1012.13~24.04.1UBUNTU-CVE-2025-21684
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2025-21684
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2025-21684
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.86.8.0-62.65.1~22.04.1UBUNTU-CVE-2025-21684
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.86.8.0-62.65.1~22.04.1USN-7595-1
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1078.79UBUNTU-CVE-2025-21684
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1078.79USN-7510-1
Ubuntu:24.04:LTSlinux-nvidia6.8.0-1029.32UBUNTU-CVE-2025-21684
Ubuntu:24.04:LTSlinux-nvidia6.8.0-1029.32USN-7595-1
Ubuntu:24.04:LTSlinux-nvidia-6.116.11.0-1007.7UBUNTU-CVE-2025-21684
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2025-21684
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2025-21684
Ubuntu:22.04:LTSlinux-nvidia-6.86.8.0-1029.32~22.04.1USN-7595-1
Ubuntu:22.04:LTSlinux-nvidia-6.86.8.0-1029.32~22.04.1UBUNTU-CVE-2025-21684
Ubuntu:24.04:LTSlinux-nvidia-lowlatency6.8.0-1029.32.1UBUNTU-CVE-2025-21684
Ubuntu:24.04:LTSlinux-nvidia-lowlatency6.8.0-1029.32.1USN-7595-1
Ubuntu:22.04:LTSlinux-nvidia-tegra5.15.0-1037.37USN-7510-3
Ubuntu:22.04:LTSlinux-nvidia-tegra5.15.0-1037.37UBUNTU-CVE-2025-21684
Ubuntu:24.04:LTSlinux-nvidia-tegra6.8.0-1008.8UBUNTU-CVE-2025-21684
Ubuntu:22.04:LTSlinux-nvidia-tegra-igx5.15.0-1026.26USN-7510-7
Ubuntu:22.04:LTSlinux-nvidia-tegra-igx5.15.0-1026.26UBUNTU-CVE-2025-21684
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2025-21684
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2025-21684
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2025-21684
Ubuntu:24.04:LTSlinux-oem-6.116.11.0-1020.20UBUNTU-CVE-2025-21684
Ubuntu:24.04:LTSlinux-oem-6.116.11.0-1020.20USN-7445-1
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2025-21684
Ubuntu:24.04:LTSlinux-oem-6.86.8.0-1029.29UBUNTU-CVE-2025-21684
Ubuntu:24.04:LTSlinux-oem-6.86.8.0-1029.29USN-7595-1
Ubuntu:22.04:LTSlinux-oracle5.15.0-1081.87USN-7510-1
Ubuntu:22.04:LTSlinux-oracle5.15.0-1081.87UBUNTU-CVE-2025-21684
Ubuntu:24.04:LTSlinux-oracle6.8.0-1027.28UBUNTU-CVE-2025-21684
Ubuntu:24.04:LTSlinux-oracle6.8.0-1027.28USN-7595-4
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2025-21684
Ubuntu:22.04:LTSlinux-oracle-6.86.8.0-1027.28~22.04.1UBUNTU-CVE-2025-21684
Ubuntu:22.04:LTSlinux-oracle-6.86.8.0-1027.28~22.04.1USN-7595-4
Ubuntu:22.04:LTSlinux-raspi5.15.0-1078.81USN-7510-7
Ubuntu:22.04:LTSlinux-raspi5.15.0-1078.81UBUNTU-CVE-2025-21684
Ubuntu:24.04:LTSlinux-raspi6.8.0-1029.33UBUNTU-CVE-2025-21684
Ubuntu:24.04:LTSlinux-raspi6.8.0-1029.33USN-7595-4
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2025-21684
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2025-21684
Ubuntu:24.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2025-21684
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2025-21684
Ubuntu:24.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2025-21684
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2025-21684
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2025-21684
Ubuntu:22.04:LTSlinux-riscv-6.86.8.0-62.65~22.04.1UBUNTU-CVE-2025-21684
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2025-21684
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2025-21684
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2025-21684
Ubuntu:24.04:LTSlinux-xilinx6.8.0-1017.18UBUNTU-CVE-2025-21684
Ubuntu:22.04:LTSlinux-xilinx-zynqmp5.15.0-1050.54UBUNTU-CVE-2025-21684

Affected products (as reported)

VendorProductVersions
Linux Linux a32c7caea292c4d1e417eae6e5a348d187546acf – before d25041d4a3b2af64c888cf762362b2528ba59294a32c7caea292c4d1e417eae6e5a348d187546acf – before f0ed2d0abc021f56fa27dc6d0770535c1851a43ba32c7caea292c4d1e417eae6e5a348d187546acf – before b0111650ee596219bb5defa0ce1a1308e6e77ccfa32c7caea292c4d1e417eae6e5a348d187546acf – before 9c035105c5537d2ecad6b9415e9417a1ffbd0a62a32c7caea292c4d1e417eae6e5a348d187546acf – before 9860370c2172704b6b4f0075a0c2a29fd84af96a
Linux Linux 5.12

References